This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/89f6527b-adbb-4687-9a24-ace3d28006fb.roa File: 89f6527b-adbb-4687-9a24-ace3d28006fb.roa (raw, json) Hash identifier: ZQMt22grmYahCSVs9y3Esmz0PhEmrtI+jmgOTG9+xyY= Subject key identifier: 92:BF:57:37:51:DF:A2:14:57:E3:6F:A3:5B:5E:B8:11:DC:23:FC:57 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 66FA47614D90DCE5CF4165A4B12D8E7A2A16BC9F Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/89f6527b-adbb-4687-9a24-ace3d28006fb.roa Signing time: Tue 25 Nov 2025 19:40:10 +0000 ROA not before: Tue 25 Nov 2025 19:40:10 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:fa:47:61:4d:90:dc:e5:cf:41:65:a4:b1:2d:8e:7a:2a:16:bc:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 25 19:40:10 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=1fe0fc2b6098d31f16ce3c344350f9c2ee4f5f3c198cd65e1e5a3ea58dce814d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:77:3b:fd:85:1d:dd:0a:05:f1:3c:bb:02:a0: 5a:cf:1b:f4:3b:8c:f6:f4:f5:d6:2f:40:6d:4a:88: 00:ae:b9:2b:e4:5a:46:09:7f:05:2d:b6:b1:89:02: d4:f3:5a:4b:2f:1c:f6:21:98:48:ef:d6:03:fe:41: 54:4e:b1:10:88:f6:15:3c:84:5c:43:3b:0f:aa:06: 92:f0:a7:29:51:25:78:49:e8:bb:55:94:15:4d:03: 61:05:36:66:01:a8:ee:f6:82:f6:1e:1a:0b:6b:fa: 55:8c:e7:02:ee:86:53:a9:db:e1:75:d2:f7:91:58: fc:0b:7c:ae:7f:69:1f:85:51:b7:6d:aa:02:d9:da: d1:45:56:e7:b7:ea:37:6d:b7:a0:36:6b:57:ff:76: eb:ca:d4:7a:e5:26:76:c2:13:7a:c8:21:43:13:17: e4:6d:aa:5f:0c:ea:9a:93:5f:de:86:30:06:ca:7c: 38:23:59:e9:50:4b:85:0a:de:d0:f6:a2:01:7c:4a: 64:6b:0d:7b:60:b8:14:74:6a:c7:01:2c:68:6b:7c: ac:26:9b:49:c9:b0:89:a2:48:55:99:60:19:7c:27: f1:27:4c:a5:0b:07:1b:65:01:64:3d:86:eb:74:74: a2:dc:a9:b9:8c:ef:c5:71:75:11:32:80:8e:bb:65: 1c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BF:57:37:51:DF:A2:14:57:E3:6F:A3:5B:5E:B8:11:DC:23:FC:57 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/89f6527b-adbb-4687-9a24-ace3d28006fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.16.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:cc:5d:cd:2a:2e:10:cd:75:9f:ec:6d:b1:fe:f3:8b:3b:be: 84:a4:4d:8c:c3:9e:52:05:ba:e7:ce:90:8d:1c:ec:b9:10:6d: 42:0a:ad:19:e4:ad:1e:87:45:d7:8d:2e:ef:7a:66:62:1b:cb: 1d:80:10:29:aa:12:d1:71:a6:ae:23:54:f5:ad:35:63:f3:5c: 3f:ef:e8:de:d3:1c:d4:c1:d4:8c:de:e2:7a:65:03:e8:4f:36: 0e:92:5d:0c:de:de:90:a1:35:f2:d8:d3:c8:fd:03:2d:0a:7d: e2:1d:aa:93:fe:8e:80:6a:a1:64:60:ad:f1:6a:bb:60:a9:0f: 7c:20:c7:01:86:27:60:1a:b2:ac:6d:33:5f:93:7e:e0:c6:a0: d4:89:fd:96:78:a9:be:17:65:bb:62:c6:a5:54:5b:e5:d6:0c: c4:9b:2e:a8:9b:b9:cb:92:4e:08:af:7f:cd:bd:56:81:4c:33: be:ff:09:54:79:9e:33:27:a2:69:6d:03:d4:26:91:eb:1f:ba: f4:da:f3:d6:c3:1a:0c:16:26:aa:cf:64:bb:79:79:ad:44:83: 39:82:e2:56:67:4f:bf:1d:58:cc:78:6c:fa:fc:77:6d:ce:76: 71:7f:a0:ef:a6:c6:d9:6f:c9:08:86:ee:c1:32:2d:a8:19:88: cc:49:47:76 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZvpHYU2Q3OXPQWWksS2OeioWvJ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTI1MTk0MDEwWhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZmUwZmMyYjYwOThkMzFmMTZjZTNjMzQ0MzUwZjljMmVl NGY1ZjNjMTk4Y2Q2NWUxZTVhM2VhNThkY2U4MTRkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpdzv9hR3dCgXxPLsCoFrPG/Q7jPb09dYvQG1KiACuuSvk WkYJfwUttrGJAtTzWksvHPYhmEjv1gP+QVROsRCI9hU8hFxDOw+qBpLwpylRJXhJ 6LtVlBVNA2EFNmYBqO72gvYeGgtr+lWM5wLuhlOp2+F10veRWPwLfK5/aR+FUbdt qgLZ2tFFVue36jdtt6A2a1f/duvK1HrlJnbCE3rIIUMTF+Rtql8M6pqTX96GMAbK fDgjWelQS4UK3tD2ogF8SmRrDXtguBR0ascBLGhrfKwmm0nJsImiSFWZYBl8J/En TKULBxtlAWQ9hut0dKLcqbmM78VxdREygI67ZRzdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkr9XN1HfohRX42+jW164Edwj/FcwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzg5ZjY1MjdiLWFkYmItNDY4Ny05YTI0LWFjZTNkMjgwMDZmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBAwDQYJKoZIhvcNAQELBQADggEBADrMXc0qLhDNdZ/sbbH+84s7voSk TYzDnlIFuufOkI0c7LkQbUIKrRnkrR6HRdeNLu96ZmIbyx2AECmqEtFxpq4jVPWt NWPzXD/v6N7THNTB1Ize4nplA+hPNg6SXQze3pChNfLY08j9Ay0KfeIdqpP+joBq oWRgrfFqu2CpD3wgxwGGJ2AasqxtM1+TfuDGoNSJ/ZZ4qb4XZbtixqVUW+XWDMSb LqibucuSTgivf829VoFMM77/CVR5njMnomltA9QmkesfuvTa89bDGgwWJqrPZLt5 ea1EgzmC4lZnT78dWMx4bPr8d23OdnF/oO+mxtlvyQiG7sEyLagZiMxJR3Y= -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:45 2025 by rpki-client